INFORMATIVA PRIVACY

Ducati has a great
respect for the privacy of the involved party. The information supplied
by the intended party to Ducati through the website will be treated
with the greatest attention and all available means to guarantee
security in the full respect of the Italian law enforced to safeguard
privacy.

The personal data
supplied by the user through the use of the website will be processed
by the holder Ducati Motor Holding S.p.A. – A Sole Shareholder Company - A Company subject to the Management and Coordination activities of AUDI AG with its registered office at
via Cavalieri Ducati 3, Bologna, Italy and by the responsible Telecom
Italia S.p.A., with its registered office at Piazza degli Affari 2,
Milan, Italy, using prevalent automated means in compliance with the
provisions of the Italian Legislative Decree n. 196 dated June 30th,
2003 - Privacy Law in relation to the various services and activities
available on the website. In particular: to consent to the registration
and authorized access by the user to the reserved area of the website
and to provide all information, assistance and services requested by
the user. To that end, the personal data of the user may be provided to
third parties having a contractual relationship with the holder Ducati
Motor Holding S.p.A. and/or to credit institutions, banks and/or
insurance companies, even incorporated outside European Union, and will
be communicated to the persons or entities responsible for or in charge
of the personal data treatment appointed by the holder Ducati Motor
Holding S.p.A.. After consenting to the activation of specific
functions, the site, in some cases, will be able to use the i.e.
cookies (file sent from the site's server to the user's browser). The
user will, at his or her free will, be informed of the use of cookies
or block the use of cookies by modifying the relative options on the
navigation programme. In this case, some of the features of the website
may not function correctly. The personal data will not be propagated.The aforementioned
provision of personal data is optional. Should such data be withheld,
access to the relative service or execution of the relative activities
available on the website will not be granted. Additional information
specific to the treatment of personal data will be supplied in relation
to a single activity or service available on the website.

As involved party, you
have the rights expressed in Italian Legislative Decree n. 196 dated
June 30th, 2003. Regarding the expression of these rights, including
the knowledge of the persons responsible for personal data treatment
appointed by Ducati Motor Holding S.p.A., the involved party may
telephone the toll free number 00800.00.38.22.84 or send written
communication to contact_us@ducati.com or by fax at +39-051-6413268.

DUCATI CALL CENTER

The personal data provided by the Data subject contacting the Ducati Customer Service will be processed by the data controller Ducati Motor Holding S.p.A. - A Sole Shareholder Company subject to the Management and Coordination activities of AUDI AG, with its registered office at via Cavalieri Ducati n. 3, Bologna, Italy (hereafter "Ducati"), and by its data processor Mr. Claudio Domenicali, for this purpose domiciled at the registered office of Ducati, using paper, electronic and automated means, in compliance with the provisions of the Italian Legislative Decree no. 196 of 30 June 2003 - Personal Data Protection Code (hereafter the "Privacy Code") and of the European Union directive 95/46/EC, for the following purposes:

(i) to manage the relationship between the Data subject and Ducati and to provide the information, the assistance and the services requested by the Data subject, as well as for statistical purposes using aggregate data or data in anonymous format. Only to these purposes personal data of the Data subject may be communicated by Ducati to companies having a contractual relationship with Ducati (such as insurance companies), to companies of the Ducati group, to Ducati subsidiary companies, or to companies part of the Ducati sales and assistance network (such as branches, importers, dealers, distributors, garages), even established outside European Union and that may do not ensure an adequate level of protection of personal data according to European Union privacy regulation, and in this case these subjects will process data only for the above-mentioned purposes; data will be brought to data processors and persons in charge of the processing (arts. 29 and 30 of the Privacy Code) knowledge designated by Ducati and by said subjects.
Express consent by the Data subject for the processing for such purpose is not requested pursuant to the provisions of Section 24, par. 1, letter b) of the Privacy Code;

(ii) subject to the express consent of the Data subject, for marketing purposes, i.e. for sending advertising material and newsletters, to carry out activities of commercial information on promotional and commercial initiatives of Ducati and its network of sales and service and its partners, for direct selling, for the performance of market or commercial communication surveys, as well as for statistical purposes using aggregate data or data in anonymous format. These activities will be carried out via e-mail, SMS (Short Message Service), via paper mail and through telephone calls via operator. Only to these purposes personal data of the Data subject may be communicated by Ducati to companies having a contractual relationship with Ducati (such as market research and data processing companies, advertising companies, Internet Service Providers, ICT service companies, communications companies, data processing companies), to companies of the Ducati group, to Ducati subsidiary companies, or to companies part of the Ducati sales and assistance network (such as branches, importers, dealers, distributors, garages), even established outside European Union and that may do not ensure an adequate level of protection of personal data according to European Union privacy regulation, and in this case these subjects will process data only for the above-mentioned purposes; data will be brought to data processors and persons in charge of the processing (arts. 29 and 30 of the Privacy Code) knowledge designated by Ducati and by said subjects. If the Data subject wishes to authorize such activities and afterwards he/she does not wish to receive further communications, or he/she would like to limit the ways in which to be contacted, it will be sufficient to send an e-mail to contact_us@ducati.com at any time;

(iii) subject to the express consent of the Data subject, to allow Ducati conducting profiling activities, i.e. activities aimed at profiling the Data subject and analysing consumption patterns and choices and using such information in order to steer its marketing activity and commercial offer, personalizing them towards the Data subject, as well as for market research and statistical purposes using aggregate data or data in anonymous format. The personal data processed for such purposes will be collected from the Data subject or from third parties or from public registers lists acts or documents, by electronic and on-line means and via coupon cards and questionnaires, organised in a data bank in a mostly automated form and associated or compared with data from different public or private databases, and they will be in particular the following: name, email, gender, telephone and mobile numbers, date of birth, residence/domicile address (city, postal code, country, province/region), family situation, level of education, data related to registration to the Ducati website and its use, motorcycle/s owned or possessed in the past, goods or services purchased from the official Ducati sales and assistance network, the Ducati website or the online shop of Ducati, participations in events organized by Ducati, Ducati App eventually downloaded or used. Only to these purposes personal data of the Data subject may be communicated by Ducati to companies having a contractual relationship with Ducati (such as market research and data processing companies, advertising companies, Internet Service Providers, ICT service companies, communications companies, data processing companies), to companies of the Ducati group, to Ducati subsidiary companies, or to companies part of the Ducati sales and assistance network (such as branches, importers, dealers, distributors, garages), even established outside European Union and that may do not ensure an adequate level of protection of personal data according to European Union privacy regulation, and in this case these subjects will process data only for the above-mentioned purposes; data will be brought to data processors and persons in charge of the processing (arts. 29 and 30 of the Privacy Code) knowledge designated by Ducati and by said subjects. If the Data subject wishes to authorize such activities and afterwards he/she wants to withdraw his/her consent, it will be sufficient to send an e-mail to contact_us@ducati.com at any time.
Regarding the aforementioned purposes, except as specially indicated above, data provided will not be communicated or assigned to third subjects by Ducati and will not be disseminated. For updating purposes, data provided by the Data Subject may be checked with other data in Ducati's lawful possession as provided by the Data subject or a third qualified party in other circumstances.
Providing personal data for the purposes of point (i) is voluntary, i.e. it's not required by the law, but it's necessary to receive the assistance, the information and the services requested: in default of providing the data indicated as "compulsory", the consequence will be that the Data subject won't be able to receive the assistance, the information and the services requested.
Providing personal data for the purposes of point (ii) is completely voluntary, i.e. it's not required by the law, but it's necessary in order to be contacted by Ducati and to allow Ducati to perform marketing activities as described at point (ii) (sending advertising material and newsletters; commercial information on promotional and commercial initiatives of Ducati and its network of sales and service and its partners; direct selling; market or commercial communication surveys): in default of providing the data for these purposes the only consequence will be the impossibility for Ducati to contact the Data subject and to perform these activities.
Providing personal data for the purposes of point (iii) is completely voluntary, i.e. it's not required by the law, but is necessary in order to allow Ducati to profile the Data subject and analyse consumption patterns and choices and to use such information in order to steer its marketing activity and commercial offer, personalizing them towards the Data subject: the only consequence for not providing data for such purposes shall be the impossibility for Ducati to proceed with the creation of the Data subject profile, to analyse his/her consumer choices and habits for the aforementioned purposes.
The Data subject has the rights expressed in Section 7 of the privacy code. Regarding the exercise of these rights, including the knowledge of the data processors designated by Ducati, the Data subject may contact Ducati: tel. +39-051-6413423, email contact_us@ducati.com, fax at +39-051-6413268.
The present privacy information notice will be subject to update.
V.19012016

DYNAMIC SIGNATURE NOTICE

1. General Information

During2015, Ducati Motor Holding Spa (“Ducati”) introduced an innovative IT solution allowing Ducati customers and users (“Customer/s”) to electronically sign agreements. This solution, hereinafter referred to as “ dynamic signature”, is part of a broader project to dematerialise (digitise) work flows by gradually moving from paper documents to digitized documents.
In short, the dynamic signature service is based on a technology that allows for documents to be signed using a tablet (digitizing tablet) using a particular type of electronic signature, reducing/eliminating the need to print paper documents to be preserved and/or handed over to customers.
This document describes the characteristics of the Advanced Electronic Signature Service and of other technologies such service is based on, and is published on the homepage of the Ducati Motor Holding websites as required by applicable regulations, so as to be available to Customers and the general public at all times.

2. What is a dynamic signature?

A dynamic signature is obtained by recording the dynamic characteristics (rhythm, pressure, coordinates, etc.) of a customer's handwritten signature written on a digitizing tablet with a stylus. The dynamic signature solution adopted by Ducati Motor Holding Spa meets the IT and law requirements of the advanced electronic signature category as defined by the Italian Prime Minister's Decree of 22-02-2013 “technical standards for the generation, affixing and verification of advanced electronic signatures, qualified electronic signatures and digital signatures” published in OJ no. 117 of 21-05-2013 and ensures (see Italian Prime Minister’s Decree 22-02-2013, art. 56, paragraph 1):
a) signer authentication
b) unique link of signature to signer
c) signature generation system is under the sole control of the signer (including any biometric data used to generate the signature)
d) ability to verify that the signed digital document remains
unaltered after it was signed
e) ability of the signer to obtain evidence of signed content
f) identification of the subject as per article 55, paragraph 2, letter a) of the technical standards
g) no elements of the signed document allow for changes to the acts, circumstances or data contained in the document
h) unique link of signature to signed document.

3. Which documents may be signed with a dynamic signature?

The documents signed by Customer with a dynamic signature are digital documents that:
- meet the technical safety requirements specified by prevailing regulations
- have the same legal value as paper documents signed by hand.
A dynamic signature may be used to sign agreements / commitments and statements of indemnity concerning the use of Ducati motorcycles for any purpose, reason or cause, and any documents relating to / connected with them.

4. How the dynamic signature service operates

The dynamic signature service adopted by Ducati Motor Holding Spa enables Customer, with the help of an operator, to:
view the document to be signed on a suitable screen;
read and check the digital document to be signed
sign the document in the special "signature" fields available on the tablet using a special pen. Visually, a dynamic signature on the table looks exactly the same as a handwritten signature on a paper document.
After the signature is completed, Customer may:
accept the signature by pressing a "confirm" key on the tablet using the stylus
repeat the signature by pressing a "cancel" key on the tablet using the stylus
cancel the signing operation
After the signing process, certain technical and IT features of the document are enabled that ensure its integrity and uneditability.
Customer has the right to obtain copy of the documents signed with dynamic signature. Customer may demand a hardcopy of the documents when they are signed, or obtain the documents in digital format by submitting an e-mail request to: contact_us@ducati.com

5. How to subscribe to the dynamic signature service of Ducati Motor Holding Spa; how to revoke one's consent

In order to use the dynamic signature service, customers need to agree to use dynamic signature to sign any documents Ducati Motor Holding Spa makes available to sign with dynamic signature in a suitable statement (see Italian Prime Minister’s Decree 22-02-2013, art. 57, paragraph 1, letter a). Customer who subscribe to this service may obtain copy of the authorisation agreement at any time free of charge by submitting an e-mail request to:contact_us@ducati.com (see Italian Prime Minister’s Decree 22-02-2013, art. 57, paragraph 1, letter c). Likewise, customers may revoke their consent statement at any time and revert to using conventional handwritten signature on paper documents.

DIGITIZING TABLET
The hardware component used by Ducati Motor Holding Spa is a special digitizing tablet based on electromagnetic resonance technology that accurately detects the biometric values of the customer affixing the signature. These tablets feature a colour TFT LCD and a special pen that the customer uses to sign the digital document displayed on the screen. The tablet shows the signature in real time as the customer writes on the screen, and customer experience is the same as when writing on a paper document.
The tablet enables customer to:
view the document and scroll through it as required
sign the document and confirm the signature
cancel the signature and sign again
cancel the signing operation
These operations are performed using a special stylus and suitable function keys available on the tablet screen; the signer has sole control over the signature generation system at all times.
DYNAMIC SIGNATURE SYSTEM
The dynamic signature system ensures the security of the biometric data that provide a unique link of the signature written on the tablet to the signer/customer. The digitizing tablet is connected to the operator's workstation in secure mode using an AES algorithm with double symmetric key exchanged using the DIFFIE-HELLMAN algorithm.
Biometric data is encrypted using a public certificate with RSA 2048-bit asymmetric key and SHA256 encryption algorithm.
Data is then embedded into the PDF and a PadES signature is created by applying a technical digital signature based on an additional certificate with private key and SHA256 algorithm.
Biometric data is not stored in clear text in any manner whatsoever, either by the tablet or by the signature application. The set of biometric values is bound to the digital document viewed and signed by Customer with a unique, indissoluble link connected, so that any given signature cannot be attached to any other document.
The digital document signed by the customer is stored in PDFa1-a format and signed digitally in PAdES mode, so as to meet all law requirements in terms of document self-consistency, uneditability and readability. At the end of the signing process, the document is sent to a digital archive to be preserved in accordance with law requirements.
BIOMETRIC DATA MANAGEMENT
Ducati Motor Holding Spa has no independent access to the biometric data of the signer. This means that such data may only be encrypted as allowed by the law with the assistance of a third party appointed by Ducati Motor Holding Spa by observing a strict, detailed corporate procedure. This ensures that biometric data is not used for any other purposes, such as identifying and authenticating Customer in IT procedures.
LEGAL DIGITAL ARCHIVE
Legal archiving is a secure archiving process for digital documents signed by Customer aimed at ensuring that documents remain undamaged, unaltered and readable over time. To this end, Ducati Motor Holding Spa uses a digital document archiving service in accordance with Italian Legislative Decree no. 82/2005 (Digital Administration Code).
When the signing process is completed, the documents signed by Customer are sent to the archiving system to ensure their long-term integrity, uneditability and validity. All documents are available in the archiving system that may be accessed by certain authorised operators that are members of the staff.